[{"vendor":"mattermost","product":"mattermost_server","defaultStatus":"unknown","cpes":["cpe:2.3:a:mattermost:mattermost_server:-:*:*:*:*:*:*:*"],"versions":[{"version":"8.1x","status":"affected"}]},{"vendor":"mattermost","product":"mattermost","defaultStatus":"unknown","cpes":["cpe:2.3:a:mattermost:mattermost:-:*:*:*:*:*:*:*"],"versions":[{"version":"9.6x","status":"affected"}]},{"vendor":"mattermost","product":"mattermost","defaultStatus":"unknown","cpes":["cpe:2.3:a:mattermost:mattermost:-:*:*:*:*:*:*:*"],"versions":[{"version":"9.5x","status":"affected"}]},{"vendor":"mattermost","product":"mattermost","defaultStatus":"unknown","cpes":["cpe:2.3:a:mattermost:mattermost:-:*:*:*:*:*:*:*"],"versions":[{"version":"8.1x","status":"affected"}]}]

{"timestamp":"2024-04-26T14:47:29.118846Z","id":"CVE-2024-22091","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Mattermost","product":"Mattermost","defaultStatus":"unaffected","versions":[{"version":"8.1.0","lessThanOrEqual":"8.1.10","versionType":"semver","status":"affected"},{"version":"9.6.0","status":"affected"},{"version":"9.5.0","lessThanOrEqual":"9.5.2","versionType":"semver","status":"affected"},{"version":"8.1.0","lessThanOrEqual":"8.1.11","versionType":"semver","status":"affected"},{"version":"9.7.0","status":"unaffected"},{"version":"8.1.11","status":"unaffected"},{"version":"9.6.1","status":"unaffected"},{"version":"9.5.3","status":"unaffected"},{"version":"8.1.12","status":"unaffected"}]}]

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-770

OR
          *cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:* versions from (including) 8.1.0 up to (excluding) 8.1.12
          *cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:* versions from (including) 9.5.0 up to (excluding) 9.5.3
          *cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:* versions from (including) 9.6.0 up to (excluding) 9.6.1

CVE: https://mattermost.com/security-updates Types: Vendor Advisory

Mattermost, Inc.: https://mattermost.com/security-updates Types: Vendor Advisory

https://mattermost.com/security-updates

Mattermost versions 8.1.x <= 8.1.10, 9.6.x <= 9.6.0, 9.5.x <= 9.5.2 and 8.1.x <= 8.1.11 fail to limit the size of a request path that includes user inputs which allows an attacker to cause excessive resource consumption, possibly leading to a DoS via sending large request paths

Mattermost, Inc. AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Mattermost, Inc. CWE-400

Mattermost, Inc. https://mattermost.com/security-updates [No types assigned]